Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/1/3137372e31322e3232342e302f32302d3234203d3e203631353638.roa
File:                     3137372e31322e3232342e302f32302d3234203d3e203631353638.roa (raw, json)
Hash identifier:          jlg3dQGYBcv5XKifokRAhV6y7Y417QYlZ4MnJ6LdLUY=
Subject key identifier:   ED:23:26:60:47:B0:B2:07:7E:4A:36:05:F5:39:58:63:B1:C4:76:83
Certificate issuer:       /CN=82D7A16EB6BF37C8E973234ED46660A264ABEF9E
Certificate serial:       1801D58654C5CE0350393165DFBEB8BE2B46723A
Authority key identifier: 82:D7:A1:6E:B6:BF:37:C8:E9:73:23:4E:D4:66:60:A2:64:AB:EF:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82D7A16EB6BF37C8E973234ED46660A264ABEF9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/1/3137372e31322e3232342e302f32302d3234203d3e203631353638.roa
Signing time:             Thu 04 Apr 2024 00:17:48 +0000
ROA not before:           Thu 04 Apr 2024 00:12:48 +0000
ROA not after:            Thu 03 Apr 2025 00:17:48 +0000
asID:                     61568
IP address blocks:        177.12.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/1/82D7A16EB6BF37C8E973234ED46660A264ABEF9E.crl
                          rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/1/82D7A16EB6BF37C8E973234ED46660A264ABEF9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82D7A16EB6BF37C8E973234ED46660A264ABEF9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:01:d5:86:54:c5:ce:03:50:39:31:65:df:be:b8:be:2b:46:72:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82D7A16EB6BF37C8E973234ED46660A264ABEF9E
        Validity
            Not Before: Apr  4 00:12:48 2024 GMT
            Not After : Apr  3 00:17:48 2025 GMT
        Subject: CN=ED23266047B0B2077E4A3605F5395863B1C47683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:c9:ee:19:52:99:97:d7:76:a1:76:43:53:
                    46:15:c2:a0:cb:6a:44:0b:5f:ff:c3:fd:48:67:50:
                    40:b5:96:b3:c0:cb:d3:ba:44:72:87:72:58:b7:32:
                    9c:c2:f1:e0:7f:b7:b7:01:c1:53:74:7e:6e:1b:dd:
                    56:49:74:da:ae:6c:3e:ea:25:4a:12:9b:2b:82:29:
                    3c:76:60:98:ff:82:d0:5e:a8:5d:e8:0d:c0:b4:3f:
                    be:5b:ee:93:d1:04:ef:ca:2b:33:85:e6:7c:e1:b0:
                    7b:2a:22:92:a9:79:e1:38:5a:be:d9:af:5d:c7:92:
                    e9:fe:aa:89:00:88:c8:1e:3a:b1:c2:08:00:43:74:
                    9c:aa:73:4e:5b:70:57:8e:85:8a:d4:b9:98:06:96:
                    4c:7b:c3:6d:e7:10:d9:9b:53:32:be:c2:fe:22:af:
                    db:61:63:ca:c6:48:b6:5d:9a:cc:2b:e9:da:21:d1:
                    24:d8:20:00:e8:24:f7:db:b4:c8:18:8a:6e:5b:ed:
                    26:19:49:bc:a6:f1:b3:46:57:b4:53:79:29:00:5b:
                    a1:c4:cb:12:e0:cb:b8:ad:0a:4d:2b:2f:ba:70:b3:
                    fd:84:95:d8:da:89:8b:13:02:04:1b:53:cf:3a:84:
                    eb:d8:84:e8:38:d9:03:e2:2d:90:9f:0d:2f:15:d5:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:23:26:60:47:B0:B2:07:7E:4A:36:05:F5:39:58:63:B1:C4:76:83
            X509v3 Authority Key Identifier:
                keyid:82:D7:A1:6E:B6:BF:37:C8:E9:73:23:4E:D4:66:60:A2:64:AB:EF:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/1/82D7A16EB6BF37C8E973234ED46660A264ABEF9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82D7A16EB6BF37C8E973234ED46660A264ABEF9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9JYxPqRzkNYudjmyo5hjjuupxkTMxGMupLrqayP3oeJB/1/3137372e31322e3232342e302f32302d3234203d3e203631353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:ab:94:fa:18:34:ba:62:03:61:dd:fe:8f:c3:6c:e7:64:61:
         0e:3e:f1:c8:be:f4:e6:90:76:67:b3:d5:8c:32:f5:c2:53:74:
         1b:87:68:4a:37:48:0c:b2:ff:47:a5:17:49:60:37:97:02:8f:
         10:4d:b3:84:77:8c:a1:d1:34:fb:ce:f6:87:0e:ca:9f:fd:8d:
         14:39:4f:c7:c9:05:a7:d4:cb:7f:15:d7:76:75:23:e6:ad:47:
         72:a5:50:cb:dd:d0:8c:c7:3e:7d:0c:65:b8:62:a6:34:e4:01:
         3a:45:26:09:96:bb:4e:26:b2:ad:e5:ea:0c:f7:65:af:f0:d3:
         56:e4:52:5a:6f:40:f8:3f:7d:59:c1:41:87:7f:bb:fb:e4:22:
         fd:cb:ee:a7:71:a9:43:90:d6:df:e8:ce:da:89:08:0b:ad:6f:
         49:49:c6:96:af:fd:64:d8:c7:2c:17:4d:53:4f:3e:9a:63:49:
         64:27:c3:99:7d:23:c2:19:b2:8a:55:03:42:6d:95:78:91:d1:
         14:fe:2c:1e:96:05:d4:a0:1d:a1:5c:c5:d8:33:78:08:c7:91:
         bb:40:e3:77:53:d6:9b:11:b0:69:7b:af:fc:5a:8e:31:68:c4:
         60:14:2a:73:f4:24:17:e4:2a:68:6c:e9:10:96:ff:26:a1:a4:
         6e:06:3f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:40 2024 by rpki-client on console-ams.rpki-client.org